We are legally able to process your personal information under Article 6 of the General Data Protection Regulation (GDPR) as the processing is necessary for us to perform our official functions as an NHS body. There will be occasions when we will rely on other lawful bases such as when the processing is required for us to comply with the law.
We are legally able to process special category information under Article 9 of the GDPR as the processing is necessary for the purposes of the management of health or social care systems and services or is necessary for the purposes of carrying out obligations in the field of employment and social security and social protection law.
We will not store personal information for longer than is required. Personal information will be anonymised when it is no longer required in an identifiable format.
Your PROMs information will stay on the platform for as long as the Health Board instructs the provider to hold it. Where a clinical decision is made from your Digital Health Assessment information, the assessment will be copied to your patient record, which is stored in line with NHS retention guidelines found here www.wales.nhs.uk.
There may be occasions where we will share your information with others. This will only be done where there is a lawful basis to do so.
Where required, we may share your information with:
As part of the Data Protection Act you have a number of rights including being able to request access to view or to obtain copies of what information the Health Board holds about you. This is known as a Subject Access Request, to make a SAR please visit Information Governance - Aneurin Bevan University Health Board
Should you have any queries, please contact the Data Protection Officer on: -
Telephone numbers: 01495 765019 / 01495 765326 or email address: DPO.ABB@wales.nhs.uk
If you are still unhappy following a review by the Data Protection Officer you can then contact the Information Commissioners Office (ICO) via their website www.ico.org.uk